CfnPentestMixinProps

class aws_cdk.cfn_property_mixins.aws_securityagent.CfnPentestMixinProps(*, agent_space_id=None, assets=None, code_remediation_strategy=None, exclude_risk_types=None, log_config=None, network_traffic_config=None, service_role=None, title=None, vpc_config=None)

Bases: object

Properties for CfnPentestPropsMixin.

Parameters:
  • agent_space_id (Optional[str]) – Identifier of agent space where the pentest should be created.

  • assets (Union[IResolvable, AssetsProperty, Dict[str, Any], None]) – Collection of assets to be tested during the pentest.

  • code_remediation_strategy (Optional[str]) – Strategy for remediating code vulnerabilities discovered during the pentest.

  • exclude_risk_types (Optional[Sequence[str]]) – A list of risk types excluded from the pentest execution.

  • log_config (Union[IResolvable, CloudWatchLogProperty, Dict[str, Any], None]) – CloudWatch Logs configuration for pentest output.

  • network_traffic_config (Union[IResolvable, NetworkTrafficConfigProperty, Dict[str, Any], None]) – Network traffic configuration for the pentest.

  • service_role (Optional[str]) – Service role for accessing resources.

  • title (Optional[str]) – Title of the penetration test.

  • vpc_config (Union[IResolvable, VpcConfigProperty, Dict[str, Any], None]) – VPC configuration that the pentest agent accesses.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.cfn_property_mixins import aws_securityagent as securityagent

cfn_pentest_mixin_props = securityagent.CfnPentestMixinProps(
    agent_space_id="agentSpaceId",
    assets=securityagent.CfnPentestPropsMixin.AssetsProperty(
        actors=[securityagent.CfnPentestPropsMixin.ActorProperty(
            authentication=securityagent.CfnPentestPropsMixin.AuthenticationProperty(
                provider_type="providerType",
                value="value"
            ),
            description="description",
            identifier="identifier",
            uris=["uris"]
        )],
        documents=[securityagent.CfnPentestPropsMixin.DocumentInfoProperty(
            artifact_id="artifactId",
            s3_location="s3Location"
        )],
        endpoints=[securityagent.CfnPentestPropsMixin.EndpointProperty(
            uri="uri"
        )],
        integrated_repositories=[securityagent.CfnPentestPropsMixin.IntegratedRepositoryProperty(
            integration_id="integrationId",
            provider_resource_id="providerResourceId"
        )],
        source_code=[securityagent.CfnPentestPropsMixin.SourceCodeRepositoryProperty(
            s3_location="s3Location"
        )]
    ),
    code_remediation_strategy="codeRemediationStrategy",
    exclude_risk_types=["excludeRiskTypes"],
    log_config=securityagent.CfnPentestPropsMixin.CloudWatchLogProperty(
        log_group="logGroup",
        log_stream="logStream"
    ),
    network_traffic_config=securityagent.CfnPentestPropsMixin.NetworkTrafficConfigProperty(
        custom_headers=[securityagent.CfnPentestPropsMixin.CustomHeaderProperty(
            name="name",
            value="value"
        )],
        rules=[securityagent.CfnPentestPropsMixin.NetworkTrafficRuleProperty(
            effect="effect",
            network_traffic_rule_type="networkTrafficRuleType",
            pattern="pattern"
        )]
    ),
    service_role="serviceRole",
    title="title",
    vpc_config=securityagent.CfnPentestPropsMixin.VpcConfigProperty(
        security_group_arns=["securityGroupArns"],
        subnet_arns=["subnetArns"],
        vpc_arn="vpcArn"
    )
)

Attributes

agent_space_id

Identifier of agent space where the pentest should be created.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html#cfn-securityagent-pentest-agentspaceid

assets

Collection of assets to be tested during the pentest.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html#cfn-securityagent-pentest-assets

code_remediation_strategy

Strategy for remediating code vulnerabilities discovered during the pentest.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html#cfn-securityagent-pentest-coderemediationstrategy

exclude_risk_types

A list of risk types excluded from the pentest execution.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html#cfn-securityagent-pentest-excluderisktypes

log_config

CloudWatch Logs configuration for pentest output.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html#cfn-securityagent-pentest-logconfig

network_traffic_config

Network traffic configuration for the pentest.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html#cfn-securityagent-pentest-networktrafficconfig

service_role

Service role for accessing resources.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html#cfn-securityagent-pentest-servicerole

title

Title of the penetration test.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html#cfn-securityagent-pentest-title

vpc_config

VPC configuration that the pentest agent accesses.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityagent-pentest.html#cfn-securityagent-pentest-vpcconfig